Remote access VPN ends individual user sessions at a corporate gateway following username/ password + MFA. Site-to-site VPN stitches complete subnets permanently; keys are exchanged automatically between routers, printers in Tokyo will reach servers in Toronto immediately without the intervention of an employee starting a client.